Legal

Privacy Policy

Protecting your personal data matters to us. This policy explains which data we process, for what purpose, and what rights you have.

Privacy Policy

Scope and legal basis

This privacy policy applies to the website of Rietberg Montessori School. We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP). Where the General Data Protection Regulation (GDPR) applies — for example to visitors from the EU/EEA — we additionally comply with its requirements.

Controller

Rietberg Montessori School

Responsible entity: Stiftung Rietbergschule (UID CHE-107.848.405)

Seestrasse 119, 8002 Zurich, Switzerland

Email: info@rietberg-montessori.ch

Phone: +41 44 205 50 60

Hosting and server logs

This website is hosted by Vercel Inc. (USA). When you visit, technically necessary data is processed in server log files: IP address, date and time, page requested, volume of data transferred, referrer, and browser and operating system details. This processing serves the secure and stable operation of the website (legitimate interest, Art. 6(1)(f) GDPR) and is not linked to you personally. Data may be transferred to the USA; such transfers are safeguarded by standard contractual clauses.

Contact form and email

If you write to us via the contact form or by email, we process the data you provide (e.g. name, email address, phone number and your message) in order to respond to your enquiry. The legal basis is processing at your request and our legitimate interest in communicating with interested parties (Art. 6(1)(b) and (f) GDPR). We retain enquiries for as long as necessary to handle them and delete them afterwards, unless statutory retention obligations apply.

Admission and trial days

For registrations, trial days and visits, we process the information you submit in order to prepare and carry out the admission process. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR). We process children's data solely within the scope of school and admission operations and with the consent of their legal guardians.

Web analytics and performance measurement

We use Vercel Web Analytics and Vercel Speed Insights to understand how our website is used and how quickly it loads, so we can improve it. These services are cookieless and do not build cross-device profiles; the data collected is aggregated and does not allow conclusions about individual people. The legal basis is our legitimate interest in a website that meets visitors' needs (Art. 6(1)(f) GDPR / Art. 31(1) revFADP).

If you accept analytics cookies in the cookie banner, we also use Google Analytics 4 and Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA). Google Analytics collects pseudonymised usage data such as pages viewed, approximate location, device and browser information, and interactions with the website. The IP address is truncated (IP anonymisation). Google Tag Manager is used to deploy analytics tags technically; it does not set its own analytics cookies, but may load other tags after you consent.

This may set cookies and transfer data to Google servers — including in the USA. Such transfers are safeguarded by the European Commission's standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR / Art. 31(1)(a) revFADP). Without your consent, Google Analytics and Google Tag Manager are not loaded.

You can withdraw your consent at any time by opening the “Cookie settings” link in the footer and disabling analytics cookies. Withdrawal applies going forward. Further information: policies.google.com/privacy.

Cookies and consent

When you first visit our website, a cookie notice (bottom sheet) appears. There you can choose which optional cookies we may set. We store your choice locally in your browser (localStorage) so we can respect it on later visits.

Necessary cookies or technically required storage are needed for basic functions (e.g. storing your language preference and — in the protected administration area — session management). These do not require consent.

We only use analytics cookies (Google Analytics 4 and Google Tag Manager) if you explicitly allow this in the cookie notice. We do not use marketing cookies.

You can change or withdraw your settings at any time via the “Cookie settings” link in the website footer.

Videos and embedded content

Videos on this website are served from our own servers and do not transfer any data to third parties.

Exception Google Maps: On the “Location” page we embed an interactive map from Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When this page loads, your IP address is transmitted to Google; data may also be transferred to the USA and cookies may be set. We use Google Maps to clearly show how to reach our school (legitimate interest). Further information can be found in Google's privacy policy at policies.google.com/privacy.

Disclosure to third parties

We only pass on personal data where this is necessary for the purposes described (e.g. to our hosting or email provider acting as a processor), where you have consented — for example when using Google Analytics and Google Tag Manager — or where we are legally obliged to do so. We do not sell personal data.

Retention

We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. After that, the data is deleted or anonymised.

Your cookie consent is stored in your browser until you change it or clear your browser storage. Usage data in Google Analytics is deleted or anonymised according to the retention periods configured with Google.

Data security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse. The website is served exclusively over encrypted HTTPS.

Your rights

You have the right to obtain information about the personal data we process, and to have it corrected, deleted or its processing restricted. You may also object to processing and — where the GDPR applies — request that your data be provided in a common format (data portability). You can withdraw consents (e.g. for analytics cookies) at any time with effect for the future — via the cookie settings in the footer or by email. To do so, contact info@rietberg-montessori.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with a competent EU supervisory authority.

Changes

We may amend this privacy policy at any time to reflect changes in the law or in our processes. The version published on this page is the applicable one.

Details about the responsible entity can be found in our legal notice.